8895 matches found
Silicon Labs Gecko SDK 安全漏洞
The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK 4.2.1 and earlier versions, which stems from a...
PT-2023-23605 · Silicon · Silicon Labs Gecko Platform Sdk
Name of the Vulnerable Software and Affected Versions: Silicon Labs Gecko Platform SDK versions prior to 4.2.1 Description: The issue arises from the compiler removal of buffer clearing in the sli crypto transparent aead encrypt tag function, leading to key material duplication to RAM. This resul...
Silicon Labs Gecko SDK 安全漏洞
The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK 4.2.1 and earlier versions, which stems from T...
CVE-2023-33003
A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...
CVE-2023-33004
A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...
CVE-2023-33004
A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...
CVE-2023-33004
A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...
CVE-2023-33004
CVE-2023-33004 affects Jenkins Tag Profiler Plugin up to version 0.2 and earlier, where a missing permission check in an HTTP endpoint allows attackers with Overall/Read permission to reset profiler statistics. Root cause: inadequate access controls on the profiling HTTP endpoint. Impact: unautho...
CVE-2023-33003
A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...
CVE-2023-33003
A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...
CVE-2023-33003
CVE-2023-33003 refers to a CSRF vulnerability in Jenkins Tag Profiler Plugin version 0.2 and earlier. The cause is a missing permission check in an HTTP endpoint, allowing attackers with Overall/Read to reset profiler statistics, and the endpoint accepts non-POST requests. Several connected sourc...
golang: encoding/xml: stack exhaustion in Unmarshal
A flaw was found in golang. Calling Unmarshal on an XML document into a Go struct, which has a nested field that uses the "any" field tag, can cause a panic due to stack exhaustion...
ctags: arbitrary command execution via a tag file with a crafted filename
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...
PT-2023-24134 · Jenkins · Jenkins Tag Profiler Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Tag Profiler Plugin versions 0.2 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to reset profiler statistics. The issue arises because the plugin does not perform a permission check in an HTT...
Jenkins Tag Profiler Plugin 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...
Moderate: ctags security update
Ctags is a C programming language indexing and cross-reference tool. Security Fixes: ctags: arbitrary command execution via a tag file with a crafted filename CVE-2022-4515 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
Jenkins Tag Profiler Plugin 跨站请求伪造漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
CVE-2023-28358
A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature allows the insertion of malicious tags. This can be exploited on servers with content security policy disabled possible leading to some issues attacks like account takeover...
Xpdf 安全漏洞
Glyph & Cog Xpdf is an open source PDF archive viewer from Glyph & Cog. A security vulnerability exists in Xpdf 4.04 and earlier versions, which stems from a loop of PDF objects in the page tag tree that can lead to infinite recursion and a stack overflow...